-Infinity
0
First published (updated )
Advisory
APPLE-149721
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 3
Source: MITRE
First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 5
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 8
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 12
Source: NVD
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 7
Source: Apple
First published (updated )
First published (updated )
Advisory
APPLE-149851
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 3
Source: MITRE
First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 5
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 8
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 12
Source: NVD
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 7
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
8.6
Input Validation
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

First published (updated )
Severity
7.7
Input Validation
AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

First published (updated )
Severity
8.6
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Audition is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

First published (updated )
Severity
5.5
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Audition is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

First published (updated )
Severity
7.7
AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Audition is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

First published (updated )
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Audition is affected by a Violation of Secure Design Principles vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

First published (updated )
Severity
7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

First published (updated )
Severity
8.6
Input Validation
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

First published (updated )
Severity
7.5
Race Condition
AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

.NET Elevation of Privilege Vulnerability

1 / 4
Source: Microsoft
First published (updated )
Severity
7

Security Vulnerabilities fixed in Firefox for iOS 160.0

First published (updated )
Advisory
MFSA2026-124
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.

First published (updated )
Severity
7.3
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.

First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.

First published (updated )
First published (updated )
Advisory
APPLE-149715
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 3
Source: MITRE
First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 5
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 8
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 12
Source: NVD
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 7
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
First published (updated )
Advisory
APPLE-149718
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 3
Source: MITRE
First published (updated )
Severity
6.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 5
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 8
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 12
Source: NVD
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 7
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203